Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9lKxogKGUDFgr0X_xYNWq7yby84.roa
File: 9lKxogKGUDFgr0X_xYNWq7yby84.roa (raw, json)
Hash identifier: NTIs/gWgunUxI9R7X7owxpMmfVUq3sK/jssiUZn7iJM=
Subject key identifier: F6:52:B1:A2:02:86:50:31:60:AF:45:FF:C5:83:56:AB:BC:9B:CB:CE
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0F690CA1F6660020E744BF347926AEBFA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9lKxogKGUDFgr0X_xYNWq7yby84.roa
Signing time: Thu 01 Oct 2026 08:24:39 +0000
ROA not before: Thu 01 Oct 2026 08:24:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 5.104.74.0/24 maxlen: 24
62.233.33.0/24 maxlen: 32
85.31.55.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:90:ca:1f:66:60:02:0e:74:4b:f3:47:92:6a:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 1 08:24:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f652b1a20286503160af45ffc58356abbc9bcbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:d1:80:03:d8:00:87:3c:3e:69:92:cc:e5:
b2:10:7b:c5:11:e8:c7:8e:2b:f0:a1:1a:89:fa:78:
cc:fc:17:38:eb:02:ea:84:c8:2f:20:2f:2c:29:dc:
4c:1e:e6:b6:be:c7:91:83:ac:2c:9a:44:5f:2e:7e:
52:2a:fc:c4:df:76:70:aa:92:c4:81:47:9e:ab:d2:
5e:e4:c1:3e:27:47:b1:86:2d:00:c3:1e:ec:66:c5:
09:d2:f1:c2:e3:a4:2d:32:3a:f4:df:ee:fc:4d:31:
e6:8d:70:6b:47:08:89:5e:13:eb:aa:25:68:7c:e3:
2a:b7:15:10:7f:ad:63:e3:5f:4e:0a:c4:cc:9a:7e:
ca:5f:f7:90:a8:ec:91:8f:e3:1d:94:66:e9:e1:9a:
e7:60:84:ad:62:2f:ab:9b:c8:89:21:14:a8:8a:16:
2b:b8:89:9d:50:88:df:38:98:15:03:e4:33:92:88:
e8:5d:0d:1d:0f:fc:ab:62:20:5f:dd:ea:ca:6e:e8:
ef:92:aa:b5:f8:2e:4f:50:ca:28:00:54:d6:6c:15:
4f:5f:ef:7e:cf:d2:d4:aa:03:e5:df:78:48:1e:8c:
30:28:52:e4:09:11:4c:4a:48:40:f0:86:5c:22:4a:
eb:c5:8f:4d:df:10:8d:38:f5:43:21:bd:fc:a1:bd:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:B1:A2:02:86:50:31:60:AF:45:FF:C5:83:56:AB:BC:9B:CB:CE
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9lKxogKGUDFgr0X_xYNWq7yby84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.74.0/24
62.233.33.0/24
85.31.55.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fa:58:ed:d5:7d:fb:94:6a:45:87:22:d6:41:9d:d4:55:01:
65:12:c4:3b:ba:6f:d1:5a:76:c5:4e:47:fe:8c:99:c4:56:3e:
f4:19:00:84:82:60:a9:91:ab:02:5c:d9:92:5a:61:26:c5:18:
df:32:3b:a7:22:f3:e4:94:d7:d4:75:93:7d:65:b4:2a:8c:62:
e7:22:98:1d:d1:f3:01:33:0f:c6:ec:55:16:68:79:5d:37:90:
83:e2:3f:a0:c0:97:cc:38:b1:69:c0:ab:7c:04:d3:fb:3c:41:
3b:5b:23:9b:70:69:a1:39:8c:15:b3:7c:5d:b2:25:10:f6:3b:
e3:6a:58:25:53:2f:ba:46:72:e4:7e:4c:ff:1c:4b:71:4e:15:
72:e6:48:0c:6d:77:6a:f0:13:cf:fd:c7:d4:55:8b:ef:d7:38:
32:8b:ca:df:55:dc:a7:9e:6c:3f:d1:92:5c:cc:1a:d5:01:c1:
c1:bc:0c:be:0d:b3:d2:25:f4:05:31:35:11:81:d2:db:79:24:
27:c1:d1:fe:6d:f8:b2:d2:a2:f2:b2:b7:f8:0e:ea:0b:3e:9a:
d0:d4:35:0d:08:cd:aa:f0:9e:d2:62:84:f7:13:a2:c4:8d:a6:
60:37:c3:42:0e:b6:87:54:69:24:7c:c8:23:51:ba:7f:2b:f6:
e9:26:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:36 2026 by rpki-client